Address PR review: ZeroTier permissions and updater.json paused boolean

- Grant NET_ADMIN capability and /dev/net/tun device so the ZEROTIER option
  works at runtime (Codex review)
- Use a JSON boolean for updater.json "paused" to match the documented format
  (CodeRabbit review)
- Document the ZeroTier requirements in README and CHANGELOG

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PXZfzWxhkWHq8i8P7fnDvL

zoraxy/CHANGELOG.md

@@ -3,4 +3,5 @@
 - Zoraxy reverse proxy with web management UI (port 8000) for Home Assistant
 - Persistent configuration stored in the add-on config directory (/config)
 - Options exposed: NOAUTH, ZEROTIER, FASTGEOIP, MDNS, plus env_vars passthrough
+- ZeroTier mode supported via the NET_ADMIN capability and /dev/net/tun device
 - Based on upstream tobychui/zoraxy (https://github.com/tobychui/zoraxy/releases)

zoraxy/README.md

@@ -57,7 +57,7 @@ container as `/config`), so they survive add-on updates and restarts.
 | Option      | Default | Description                                                                                  |
 | ----------- | ------- | -------------------------------------------------------------------------------------------- |
 | `NOAUTH`    | `false` | Disable authentication for the management interface (use with care).                          |
-| `ZEROTIER`  | `false` | Enable the ZeroTier global area network controller (requires extra host capabilities).        |
+| `ZEROTIER`  | `false` | Enable the ZeroTier global area network controller (uses the `NET_ADMIN` capability and `/dev/net/tun`, both granted by the add-on). |
 | `FASTGEOIP` | `false` | Enable high-speed GeoIP lookup (uses ~1 GB extra memory).                                      |
 | `MDNS`      | `true`  | Enable mDNS service discovery.                                                                 |
 | `TZ`        | -       | Timezone, e.g. `Europe/Brussels`.                                                             |

zoraxy/config.yaml

@@ -23,6 +23,10 @@ map:
   - addon_config:rw
   - share:rw
   - ssl
+privileged:
+  - NET_ADMIN
+devices:
+  - /dev/net/tun
 environment:
   PORT: "8000"
   DOCKER: "true"

zoraxy/updater.json

@@ -1,6 +1,6 @@
 {
   "last_update": "2026-06-19",
-  "paused": "false",
+  "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "zoraxy",
   "source": "github",